Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: b6k63kWZbIXz/X6kGxaxnQ8Gl4I52AyDUi5MbqHavcs=
Subject key identifier: 66:B2:27:2C:E4:6A:76:1A:75:41:22:39:D3:73:EC:B9:B7:30:09:99
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 019A4EF4D4DA76CC1DAF229B93D818A57993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:00:59 +0000
Manifest this update: Tue 04 Nov 2025 13:00:59 +0000
Manifest next update: Wed 05 Nov 2025 13:00:59 +0000
Files and hashes: 1: IsTCtVmTNyn-RD8cnFqGYXSoe0E.roa (hash: L2WChiXDdgP/OiZ7K6XF82266pxnvmteFE2BApkpXrw=)
2: nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa (hash: DDaDM0x5+8q+LGF59JGSBz5quMqPXuHhZb7HpNUm6U8=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: U4veRYu/B5zs6bOhTMSclbYMBcdRgJBcESV94lSC4Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d4:da:76:cc:1d:af:22:9b:93:d8:18:a5:79:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Nov 4 13:00:59 2025 GMT
Not After : Nov 5 13:00:59 2025 GMT
Subject: CN=66b2272ce46a761a75412239d373ecb9b7300999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:75:60:fa:cc:47:6e:a8:9e:44:f0:03:38:
51:da:5b:cb:42:4e:91:bb:27:e9:2f:f7:79:ca:a9:
e7:a7:b9:15:ed:fa:f0:33:76:f4:fd:f9:67:aa:59:
7a:dc:c7:c3:8e:49:10:91:d4:a6:66:f0:45:54:7d:
10:90:6d:84:31:d9:52:91:b2:cd:d2:e0:3a:89:38:
2d:b6:7d:05:cf:2b:44:e9:58:37:6c:19:e8:27:35:
87:a3:3a:b1:10:51:33:84:76:fb:34:5d:a5:89:18:
a0:d0:82:bb:f4:8b:ad:5f:54:bb:1e:0c:3d:45:55:
e4:62:a1:c2:a8:10:a4:9a:c3:86:2a:30:b8:a4:6b:
00:a5:93:37:c1:dd:94:18:c9:d6:ce:99:ee:1f:61:
a4:39:cf:f8:07:fa:e1:02:da:40:43:92:be:49:61:
07:c4:c3:94:95:3a:5e:b4:13:d5:0e:67:b5:9c:d5:
c4:83:c7:03:0f:b4:54:33:86:c4:12:cc:2c:4e:b8:
cd:c5:f6:7e:b5:47:70:50:6b:90:9e:ac:ef:a2:75:
44:55:27:5e:da:4d:fd:e1:4d:04:1a:e2:3b:af:1c:
01:1c:b6:57:97:5b:ee:e0:c1:96:2e:5d:00:41:3f:
e1:5b:f2:60:5e:a3:75:fd:ed:4c:69:89:64:3f:91:
ea:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B2:27:2C:E4:6A:76:1A:75:41:22:39:D3:73:EC:B9:B7:30:09:99
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ae:c3:7c:e8:1e:86:72:b4:86:9e:58:8e:da:eb:fa:cc:b6:
c4:b0:cc:cc:ae:95:91:9c:7b:7b:f2:1e:ec:8d:b7:3f:4c:1b:
b3:6d:24:31:95:a9:00:76:e6:21:dd:eb:0b:c8:4b:11:ab:2b:
b0:d4:81:2e:3e:d8:56:6e:fb:dc:5a:cf:7a:2c:57:93:60:96:
c2:0e:88:be:8b:0c:b2:55:bc:ac:ca:45:d4:cd:59:d0:35:90:
9f:18:c6:f8:1b:01:c3:a6:58:b6:94:d4:a9:49:05:67:9c:58:
c1:b2:1a:b9:6a:3a:8e:ab:46:5c:fc:37:20:86:e7:fd:ea:39:
a7:52:27:57:ac:9f:7d:b1:c1:11:2e:87:bc:9e:86:c7:1b:3e:
b5:b5:98:11:a3:ea:60:02:b1:95:63:37:ca:9e:d0:ef:17:f5:
c6:93:f9:39:f6:a5:c8:74:c8:e6:a3:01:67:56:34:b6:80:53:
e9:41:b1:52:54:e1:8c:06:09:85:0e:0e:0f:3e:ca:50:45:3e:
97:b9:b7:fc:a5:0d:1f:f7:19:a5:5d:66:87:f2:00:05:18:02:
4f:33:70:fc:18:7f:ff:3c:0e:75:fa:f9:5c:6e:b4:5e:fb:2b:
95:e6:b2:6d:00:ae:52:3c:11:74:fc:d2:06:7e:47:bc:c9:64:
4d:39:cc:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9NTadswdryKbk9gYpXmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MWQ0ZTk3ODgxMGU5Nzg5YTc2ZTY4N2E3ZGRkOTc1MjZi
MGQ5YmMwHhcNMjUxMTA0MTMwMDU5WhcNMjUxMTA1MTMwMDU5WjAzMTEwLwYDVQQD
Eyg2NmIyMjcyY2U0NmE3NjFhNzU0MTIyMzlkMzczZWNiOWI3MzAwOTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6p1YPrMR26onkTwAzhR2lvLQk6R
uyfpL/d5yqnnp7kV7frwM3b0/flnqll63MfDjkkQkdSmZvBFVH0QkG2EMdlSkbLN
0uA6iTgttn0FzytE6Vg3bBnoJzWHozqxEFEzhHb7NF2liRig0IK79IutX1S7Hgw9
RVXkYqHCqBCkmsOGKjC4pGsApZM3wd2UGMnWzpnuH2GkOc/4B/rhAtpAQ5K+SWEH
xMOUlTpetBPVDme1nNXEg8cDD7RUM4bEEswsTrjNxfZ+tUdwUGuQnqzvonVEVSde
2k394U0EGuI7rxwBHLZXl1vu4MGWLl0AQT/hW/JgXqN1/e1MaYlkP5HqowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGayJyzkanYadUEiOdNz7Lm3MAmZMB8GA1UdIwQY
MBaAFKQdTpeIEOl4mnbmh6fd2XUmsNm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmIt
MDk1ZTcxODhkMGEwLzEvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmItMDk1ZTcxODhkMGEw
LzEvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkK7DfOge
hnK0hp5Yjtrr+sy2xLDMzK6VkZx7e/Ie7I23P0wbs20kMZWpAHbmId3rC8hLEasr
sNSBLj7YVm773FrPeixXk2CWwg6IvosMslW8rMpF1M1Z0DWQnxjG+BsBw6ZYtpTU
qUkFZ5xYwbIauWo6jqtGXPw3IIbn/eo5p1InV6yffbHBES6HvJ6Gxxs+tbWYEaPq
YAKxlWM3yp7Q7xf1xpP5OfalyHTI5qMBZ1Y0toBT6UGxUlThjAYJhQ4ODz7KUEU+
l7m3/KUNH/cZpV1mh/IABRgCTzNw/Bh//zwOdfr5XG60XvsrleaybQCuUjwRdPzS
Bn5HvMlkTTnM2Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:34:06 2025 by rpki-client